CVE-2020-28917
Medium
Description
An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g., cleartext passwords if ext:felogin is installed) may be saved.
SeverityMedium
CVSS6.5
Exploit probability45. percentile0.5%
ProductView Frontend Statistics
PublishedNov 18, 2020
First seenNov 18, 2020
How to fix
Update
- view_frontend_statistics_project view_frontend_statistics2.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| view_frontend_statistics_project view_frontend_statistics | v < 2.0.1 | 2.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.